BugTraq
International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 08 2005 04:39AM
Brandon Kovacs (liljoker771 gmail com) (2 replies)
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 09 2005 03:31PM
Will Kamishlian (will will-k com) (1 replies)
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 10 2005 11:24AM
Peter J. Holzer (hjp wsr ac at) (1 replies)
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 11 2005 07:07PM
Scott Gifford (sgifford suspectclass com) (2 replies)
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 11 2005 10:44PM
Neil W Rickert rickert+bt (at) cs.niu (dot) edu [email concealed] (rickert+bt cs niu edu) (2 replies)
RE: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 13 2005 12:32AM
David Schwartz (davids webmaster com) (1 replies)
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 15 2005 08:12AM
Vincent Archer (var deny-all com) (2 replies)
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 15 2005 08:44PM
Thor (Hammer of God) (thor hammerofgod com) (2 replies)
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 15 2005 09:56PM
Sebastian (security-basics helsinki fi eu org) (1 replies)
Re: International Domain Name [IDN] support in modern browsers allowsattackers to spoof domain name URLs + SSL certs. Feb 17 2005 12:19AM
Stefan Paletta (stefanp cabal1 com)
Sebastian wrote/schrieb/scripsit:
>A quick (and very non-scientific) thought: Do you have trust in the
>issuer of your CC?
>Do you trust a shop that has "Your major CC accepted" posted on the door?
>Do you trust someone that can't provide the means to verify that trust,
>with or without the sign?
>Do you, as an average tourist, even know how you could check it?
>
>I would think that the answer lies in one of those questions..

The key difference between a CA and a CC company is that the latter
takes part in the actual business transaction between the parties.
The customer does not have to trust the CC company to certify the shop
because he can demand the CC issuer to do a chargeback with almost no
questions asked.

The CC system also works in a way that is safe as long as customers
apply common sense, which they are expected to do. It still needs to be
figured out how to make common sense work for public key crypto on the
other hand.

-Stefan
--
junior guru SP666-RIPE JID:stefanp (at) jabber.de.cw (dot) net [email concealed] SMP@IRC

[ reply ]
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 12 2005 04:03AM
Scott Gifford (sgifford suspectclass com) (1 replies)
Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs. Feb 15 2005 07:00PM
bkfsec (bkfsec sdf lonestar org) (2 replies)


 

Privacy Statement
Copyright 2010, SecurityFocus